摘要： 当前Android系统恶意应用程序数量增长迅猛，然而传统检测系统无法对其进行快速有效检测，移动终端安全性面临严重威胁。提出一种将特征加权与双向长短期记忆（Bi-LSTM）神经网络深度学习算法相结合的恶意检测系统。采用静态分析方法从恶意与良性应用程序中提取不同类型行为特征，利用特征加权方法消除噪声与不相关因素后构建特征向量，使用Bi-LSTM深度学习算法优化行为特征参数，并设计恶意与良性应用程序分类模型，建立特征加权与深度学习算法相结合的恶意应用程序检测系统。实验结果表明，与支持向量机、RNN等传统检测系统相比，该系统对恶意应用程序具有较高的检测精度与准确率。

关键词: Android系统, 恶意应用, 特征加权, 深度学习, 双向长短期记忆神经网络

Abstract: At present the rapidly growing malicious applications in Android systems have imposed significant threats to the security of mobile terminals,but the traditional detection systems fail to detect them quickly and effectively.To address the problem,this paper proposes a malware detection system which combines feature weighting with the deep learning algorithm using Bidirectional Long Short-Term Memory (Bi-LSTM) neural network.The static analysis method is used to extract different types of behavior features from malicious and normal applications.The feature weighting method is used to eliminate noise and irrelevant factors to construct feature vectors.The Bi-LSTM-based deep learning algorithm is used to optimize the behavior feature parameters.Then a classification model for malicious and normal applications is designed,and on this basis a detection system for malicious applications combining feature weighting and the deep learning algorithm is constructed.Experimental results show that compared with traditional detection systems such as Support Vector Machine(SVM) and RNN,the proposed system has higher precision and accuracy in malicious application detection.

Key words: Android system, malware application, feature weighting, deep learning, Bidirectional Long Short-Term Memory(Bi-LSTM) neural network

中图分类号: 

• TP316